
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier: CzUdbKA4AH8swCznmSGvNSQ1keEvMI828DYcBviUaxE=
Subject key identifier: DC:F2:73:2D:E2:6B:B1:59:28:D9:89:02:93:D0:E5:49:D5:D5:48:3F
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial: 1DD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number: 1DC2
Signing time: Wed 20 May 2026 16:06:02 +0000
Manifest this update: Wed 20 May 2026 16:06:01 +0000
Manifest next update: Wed 27 May 2026 16:06:01 +0000
Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: yf49xLjYSjdX2yGq8unAhrhLrThdSHVs6E++wRJ4K9k=)
2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7632 (0x1dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Validity
Not Before: May 20 16:06:01 2026 GMT
Not After : May 27 16:06:01 2026 GMT
Subject: CN=6a0ddbea-5e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:f4:43:98:2b:46:88:9d:fa:0c:0b:ee:57:
36:7e:24:41:59:e8:d3:d5:1e:37:d9:3f:47:b5:a6:
23:0a:7f:c8:7c:44:d0:d1:f0:3a:a5:ca:77:39:36:
99:34:30:2d:74:f6:00:41:7a:58:4a:cf:23:fd:3d:
41:58:b4:ec:a9:a9:1b:dc:89:de:b1:29:22:cd:c9:
59:81:05:0e:62:e8:c7:1a:ed:7e:cb:1b:88:9c:e3:
ce:ae:cc:ab:01:67:c2:8b:29:29:d1:f1:1d:6d:64:
c1:d5:87:b6:b2:16:70:11:63:62:d7:e4:c7:bc:33:
2d:ba:1c:97:3e:9f:ab:9c:c5:8f:20:18:02:05:b7:
f3:5f:56:94:a6:b3:d6:ef:4d:11:65:5b:4a:ec:2f:
a2:bc:69:22:8a:70:ad:0e:41:e6:fd:28:33:87:23:
e1:9a:5d:57:4e:7f:a4:19:e4:f3:1d:d6:13:23:d7:
97:bd:0d:d4:3b:08:dc:5c:f1:0a:e8:2b:95:68:7e:
a6:59:8d:b0:9d:84:a8:19:24:13:05:cc:d7:3c:29:
52:ef:0d:3e:b1:98:fe:f5:c6:aa:a1:28:21:6d:4e:
4b:2e:6e:58:ae:64:c4:2d:0c:7b:d7:79:00:d9:72:
9a:1f:91:30:af:ff:3f:61:ea:5c:8f:d1:d0:b6:86:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:73:2D:E2:6B:B1:59:28:D9:89:02:93:D0:E5:49:D5:D5:48:3F
X509v3 Authority Key Identifier:
keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:e4:0e:4f:7f:7b:2b:6b:f9:0c:74:bb:a6:2a:cf:10:b8:
34:6a:f9:f6:a4:57:62:ce:25:1d:d4:81:6c:3c:d7:ba:f4:33:
07:02:4f:30:29:17:d7:f5:72:af:5b:1a:ec:32:bb:aa:20:e0:
fb:22:e0:26:b7:c2:be:f5:04:38:bb:ba:27:cf:3e:16:04:55:
25:48:7b:47:53:77:53:eb:cd:37:48:62:ac:bb:bb:bd:72:7e:
a4:04:70:40:44:73:34:b2:56:2f:0a:ff:95:bc:51:a7:f2:dd:
aa:c0:23:ce:e5:4d:51:7d:6e:3b:74:4a:40:23:16:b0:62:c6:
e0:57:1c:75:84:cb:74:21:1e:66:a7:0b:86:1d:ea:11:53:27:
17:e8:9a:2f:e2:4a:76:aa:bb:c8:67:f2:8a:78:07:6f:07:40:
30:fc:dd:d0:eb:19:57:0a:fe:80:aa:15:c9:8b:5d:ae:90:25:
a7:f5:3d:df:10:33:4e:39:77:b6:d2:a8:f2:8b:06:5a:54:98:
0d:56:aa:05:e0:e0:86:80:3c:da:cf:c1:c1:de:ea:e9:4f:fe:
52:43:70:b3:e3:52:8b:06:24:c2:0c:e8:e6:72:6a:e4:64:3f:
ef:ea:f9:61:48:7f:ae:85:55:62:9f:bb:54:8d:ca:fa:36:24:
4d:c8:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:05 2026 by rpki-client